mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-01-25 09:35:19 +00:00
Improve wording, punctuation, etc.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
parent
787c79dc1a
commit
20c1f03dd5
@ -5,12 +5,13 @@ Features
|
||||
|
||||
Changes
|
||||
* Previously the macro MBEDTLS_SSL_DTLS_CONNECTION_ID implemented version 05
|
||||
of the draft, and was marked experimental and disabled by default. It is
|
||||
now no longer experimental, and implements the final version from RFC 9146,
|
||||
which is not interoperable with the draft-05 version. If you need to
|
||||
communicate with peers that use earlier versions of Mbed TLS, you
|
||||
need to define MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT to 1, but then you
|
||||
won't be able to communicate with peers that use the standard (non-draft)
|
||||
version. If you need to interoperate with both classes of peers with the
|
||||
of the IETF draft, and was marked experimental and disabled by default.
|
||||
It is now no longer experimental, and implements the final version from
|
||||
RFC 9146, which is not interoperable with the draft-05 version.
|
||||
If you need to communicate with peers that use earlier versions of
|
||||
Mbed TLS, you need to define MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT to 1,
|
||||
but then you won't be able to communicate with peers that use the standard
|
||||
(non-draft) version.
|
||||
If you need to interoperate with both classes of peers with the
|
||||
same build of Mbed TLS, please let us know about your situation on the
|
||||
mailing list or GitHub.
|
||||
|
@ -1,2 +1,2 @@
|
||||
Changes
|
||||
* Add the ability to query PSA_WANT_xxx macros to query_compile_time_config
|
||||
* Add the ability to query PSA_WANT_xxx macros to query_compile_time_config.
|
||||
|
@ -1,3 +1,3 @@
|
||||
Bugfix
|
||||
* Fix build error due to missing prototype
|
||||
warning when MBEDTLS_DEPRECATED_REMOVED is enabled
|
||||
* Fix a build error due to a missing prototype warning when
|
||||
MBEDTLS_DEPRECATED_REMOVED is enabled.
|
||||
|
@ -1,4 +1,3 @@
|
||||
Bugfix
|
||||
* Fix bugs and missing dependencies when
|
||||
building and testing configurations with
|
||||
only one encryption type enabled in TLS 1.2.
|
||||
* Fix bugs and missing dependencies when building and testing
|
||||
configurations with only one encryption type enabled in TLS 1.2.
|
||||
|
@ -1,3 +1,3 @@
|
||||
Bugfix
|
||||
* Fixed an issue that cause compile error using CMake IAR toolchain.
|
||||
* Fix a compilation error when using CMake with an IAR toolchain.
|
||||
Fixes #5964.
|
||||
|
@ -1,4 +1,4 @@
|
||||
Bugfix
|
||||
* Fix TLS 1.3 session resumption fail. Fixes #6488.
|
||||
* Add configuration check to exclude TLS 1.3 optional authentication of
|
||||
client.
|
||||
* Fix TLS 1.3 session resumption. Fixes #6488.
|
||||
* Add a configuration check to exclude optional client authentication
|
||||
in TLS 1.3 (where it is forbidden).
|
||||
|
@ -1,3 +1,3 @@
|
||||
Bugfix
|
||||
* Fix possible crash in TLS PRF code, if a failure to allocate memory occurs.
|
||||
Reported by Michael Madsen in #6516.
|
||||
* Fix a possible null pointer dereference if a memory allocation fails
|
||||
in TLS PRF code. Reported by Michael Madsen in #6516.
|
||||
|
@ -1,6 +1,6 @@
|
||||
Features
|
||||
* Shared code to free x509 structs like mbedtls_x509_named_data
|
||||
* Shared code to free x509 structs like mbedtls_x509_named_data.
|
||||
New deprecations
|
||||
* Deprecate mbedtls_asn1_free_named_data().
|
||||
Use mbedtls_asn1_free_named_data_list()
|
||||
or mbedtls_asn1_free_named_data_list_shallow()
|
||||
or mbedtls_asn1_free_named_data_list_shallow().
|
||||
|
@ -1,9 +1,8 @@
|
||||
Features
|
||||
* Mbed TLS supports TLS 1.3 key establishment via pre-shared keys,
|
||||
* Mbed TLS now supports TLS 1.3 key establishment via pre-shared keys,
|
||||
pre-shared keys provisioned externally or via the ticket mechanism
|
||||
(session resumption).
|
||||
The MBEDTLS_SSL_SESSION_TICKETS configuration option controls the support
|
||||
for the ticket mechanism.
|
||||
MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_xxx_ENABLED configuration options
|
||||
have been introduced to control the support for the three possible
|
||||
TLS 1.3 key exchange modes.
|
||||
The ticket mechanism is supported when the configuration option
|
||||
MBEDTLS_SSL_SESSION_TICKETS is enabled.
|
||||
New options MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_xxx_ENABLED
|
||||
control the support for the three possible TLS 1.3 key exchange modes.
|
||||
|
Loading…
x
Reference in New Issue
Block a user